mirror of
https://github.com/MadsLorentzen/ai-job-search.git
synced 2026-09-17 08:36:25 +00:00
ci: scope dependency-review to upstream PRs - forks lack Dependency graph by default
Verified on a fork: the action fails with 'Dependency review is not supported on this repository' until Dependency graph is manually enabled, and forks don't inherit it. Guarded with the same github.repository == upstream condition the other upstream-only jobs use. With the graph enabled the action passes, so the config itself is sound.
This commit is contained in:
@@ -55,8 +55,11 @@ jobs:
|
||||
- run: python tools/security_guards.py
|
||||
|
||||
dependency-review:
|
||||
name: Dependency review
|
||||
if: github.event_name == 'pull_request'
|
||||
name: Dependency review (upstream PRs only)
|
||||
# Requires the repo's Dependency graph (enabled by default on public
|
||||
# repos, but NOT on forks) - so this runs only on PRs to the upstream
|
||||
# repo, same pattern as the other upstream-only jobs.
|
||||
if: github.event_name == 'pull_request' && github.repository == 'MadsLorentzen/ai-job-search'
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
|
||||
|
||||
Reference in New Issue
Block a user